Actively exploited in the wild
Dante Discovery Process Control Vulnerability
Audinate - Dante Discovery · Listed in the CISA KEV since 2025-02-06. This indicates confirmed attacks in production environments.
Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
CVE-2022-23748
HighCVSS 7.8KEVSummary
mDNSResponder.exe is vulnerable to a DLL Sideloading attack. The executable improperly specifies how to load the DLL, from which folder and under what conditions. An attacker could use the legitimate executable to load malicious files.
Risk Assessment
An attacker could load a malicious DLL and execute arbitrary code in the context of a privileged process, potentially leading to privilege escalation.
Recommendation
Update the software containing mDNSResponder.exe to the latest version and consider restricting write permissions in directories from which DLLs are loaded.
Other vulnerabilities in mDNSResponder
See all- CVE-2015-7988Critical
The handle_regservice_request function in mDNSResponder before version 625.41.2 allows remote attackers to execute arbitrary code or cause a denial of service (NULL pointer dereference) via unspecified vectors.
- CVE-2015-7987Critical
Multiple buffer overflows in mDNSResponder before version 625.41.2 allow remote attackers to read or write to out-of-bounds memory locations. The issues involve the GetValueForIPv4Addr, GetValueForMACAddr, rfc3110_import, and CopyNSEC3ResourceRecord functions.
Original NVD description (English source)
mDNSResponder.exe is vulnerable to DLL Sideloading attack. Executable improperly specifies how to load the DLL, from which folder and under what conditions. In these scenarios, a malicious attacker could be using the valid and legitimate executable to load malicious files.